Compatibility with older user session ID format

Beginning with WebSEAL verion 6.0, the format of the user session ID value additionally includes the name of the replica set.

The user-session-ids-include-replica-set stanza entry in the [session] stanza of the WebSEAL configuration file controls this operation. Default is "yes". For example:

A value of "yes" instructs WebSEAL to include the replica set name in the user session ID value. This setting allows us to use the pdadmin server task terminate session to terminate user sessions on virtual host junctions.

If we require user session ID compatibility with versions of WebSEAL prior to version 6.0, we can disable this function. For example:

A value of "no" instructs WebSEAL to not include the replica set name in the user session ID value.

If user-session-ids-include-replica-set = no, WebSEAL assumes the pdadmin server task terminate session command applies to members of the replica set defined by the [session], standard-junction-replica-set stanza entry.

The pdadmin server task terminate session command does not succeed for sessions initiated on virtual host junctions.

To assign standard junctions to a replica set, see Assigning standard junctions to a replica set.

To assign virtual hosts to a replica set, see Virtual hosts assigned to a replica set.

Parent topic: Terminating user sessions